CVE-2023-38385: WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability

Q: What is the severity of CVE-2023-38385?

CVE-2023-38385 is classified as a Missing Authorization vulnerability that poses critical risks due to incorrect access control configurations.

Q: How do I fix CVE-2023-38385?

To fix CVE-2023-38385, update Artbees JupiterX Core to a version above 3.3.0, ensuring proper access control configurations.

Q: What versions are affected by CVE-2023-38385?

CVE-2023-38385 affects Artbees JupiterX Core versions from 3.0.0 to 3.3.0.

Q: What are the implications of CVE-2023-38385?

Exploiting CVE-2023-38385 can allow unauthorized access to sensitive areas of the application.

Q: Is there a workaround for CVE-2023-38385?

Currently, the best workaround for CVE-2023-38385 is to restrict user permissions manually until an update is applied.

Published Dec 13, 2024

Updated

Missing Authorization vulnerability in artbees JupiterX Core jupiterx-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JupiterX Core: from n/a through 3.0.0-3.3.0.

Affected Software

3 affected components

Artbees Jupiter X Core Wordpress>=3.0.0<3.3.5

Artbees JupiterX Core>=3.0.0<=3.3.0

WordPress Jupiter X Core<=3.3.0

Remediation

Information

No patched version is available. No reply from the vendor.

Event History

Dec 13, 2024

CVE Published

via MITRE·02:23 PM

Data Sourced

via MITRE·02:23 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-38385?

CVE-2023-38385 is classified as a Missing Authorization vulnerability that poses critical risks due to incorrect access control configurations.

How do I fix CVE-2023-38385?